What is CVE-2023-1574?

CVE-2023-1574 is a medium-severity vulnerability in Devolutions Remote Desktop Manager, classified under Insufficiently Protected Credentials. CVSS score: 6.5/10. Published 2023-04-02.

How severe is CVE-2023-1574?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Devolutions Remote Desktop Manager

CVE-2023-1574

Information disclosure in the user creation feature of a MSSQL data source in Devolutions Remote Desktop Manager 2023.1.9 and below on Windows allows an attacker with access to the user interface to obtain sensitive information via the error message dialog that displays the password in clear text.

EPSS: 0.005 (38.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Devolutions Remote Desktop Manager — versions 0
Devolutions Remote_desktop_manager

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

security@devolutions.net (Vendor Advisory)

Frequently asked questions

What is CVE-2023-1574?: CVE-2023-1574 is a medium-severity vulnerability in Devolutions Remote Desktop Manager, classified under Insufficiently Protected Credentials. CVSS score: 6.5/10. Published 2023-04-02.
How severe is CVE-2023-1574?: Medium severity. CVSS v3 base score is 6.5 out of 10.